A (1)_____ is аn event in which аn аdverse activity оn the оrganizatiоn's IT systems/infrastructure has been confirmed. A (2)_____ is an event that has been flagged for further review to determine if the alerted event is a false positive, or a true adverse event.